openloophealth - Senior IT Audit Manager

Des Moines, Iowa, United States - Hybrid3w ago

Remote Senior NA Pharmaceuticals Digital Health Auditor Change Management AWS Azure GCP Governance

Requirements

• Bachelor's degree in Information Systems, Information Technology, Computer Science, or equivalent technical field and active Certified Information Systems Auditor (CISA) designation • 7+ years of progressive IT audit experience in business risk advisory consulting or internal audit IT specialization • Demonstrated hands-on experience with IT general controls (ITGC) testing, including access management, change management, computer operations, and SDLC • Strong knowledge of IT governance and control frameworks (COBIT, COSO, NIST 800-53, ISO 27001) and ISACA IT audit standards and professional practices • Demonstrated experience auditing cybersecurity and cloud infrastructure controls, including network security, identity and access management, vulnerability management, incident response, and cloud environments such as AWS, Azure, or GCP • Familiarity with HIPAA Security Rule requirements, including technical safeguards, risk analysis, and security incident procedures • Experience auditing application controls across SaaS platforms and regulated healthcare technology environments, including EHR and EMR systems, with hands-on testing of input, processing, and output controls, data integrity, and access controls • Demonstrated use of AI tools to enhance audit execution, accelerate control testing, and improve efficiency across the audit lifecycle • Ability to execute IT audit engagements independently, manage multiple concurrent engagements, and deliver on time without close supervision • Clear, concise written and verbal communication skills; able to translate complex technical findings into practical, actionable recommendations for both IT and non-IT audiences • Public accounting background (Big 4 or regional firm) with an IT audit or technology risk advisory focus • Additional certifications such as CRISC, CISSP, CISM, or CIA • Prior experience supporting SOX ITGC compliance in a pre-IPO, newly public, or high-growth company environment • Experience auditing or assessing AI governance frameworks, including model governance, data quality controls, and compliance with emerging AI regulations • Familiarity with data privacy frameworks beyond HIPAA, including CCPA or other applicable state-level regulations • Knowledge of DevOps practices and SDLC security controls relevant to software development and deployment pipelines • Proficiency with GRC platforms (e.g., AuditBoard, Workiva, or Vanta) for IT audit management and evidence collection • Experience in digital health, telehealth, or multi-state healthcare services environments, including familiarity with pharmacy management systems, dispensing technology, or regulated pharmaceutical IT environments

Responsibilities

• Develop and maintain a risk-based IT audit plan, conducting periodic IT risk assessments across systems, applications, infrastructure, and emerging technology domains to establish audit priorities • Lead end-to-end IT audit engagements, from planning and scoping through fieldwork, reporting, and issue closure • Facilitate kickoff, status update, and closing meetings with IT process owners, system owners, and senior management • Design and execute IT control testing procedures independently, including ITGC testing across access management, change management, computer operations, and system development life cycle (SDLC) • Assess and validate cybersecurity controls, including network security, identity and access management, vulnerability management, and incident response • Evaluate cloud infrastructure controls (including AWS environments) for security, reliability, and compliance with applicable frameworks and regulatory requirements • Conduct audits of EHR and EMR systems and clinical application controls, and assess data privacy controls for compliance with HIPAA Security Rule, CCPA, and applicable state-level regulations • Support the governance of AI governance frameworks and controls, including model governance, data quality, bias risk, and compliance with emerging AI regulations • Prepare and maintain IT audit documentation including process narratives, system flowcharts, risk and control matrices (RCMs), testing workpapers, and audit reports • Partner with management to design, remediate, and validate IT controls, providing practical and prioritized recommendations to address identified gaps and process weaknesses • Track open IT audit issues and remediation plans through closure, validating the effectiveness of corrective actions • Monitor the evolving IT risk, cybersecurity, and regulatory landscape to keep the IT audit plan current and relevant

Benefits

• Medical, Dental & Vision • Flexible Spending / Health Savings Accounts • Generous PTO and hybrid-work flexibility • 401(k) with Company Match • Life Insurance, Pet Insurance, and more • We have a relatively flat organizational structure here at OpenLoop. Everyone is encouraged to bring ideas to the table and make things happen. This fits in well with our core values of Autonomy, Competence and Belonging, as we want everyone to feel empowered and supported to do their best work. • Sound like a good fit? We’d love to meet you.